Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3673434/E02DC5CA573B11F0946C0BB1DAE4EC9C/zDbEyDb2g8aerrH_ZE9EfXvZhyw.mft
File:                     zDbEyDb2g8aerrH_ZE9EfXvZhyw.mft (raw, json)
Hash identifier:          EZkwJSDQ9SbaG67UtrU0Kcf8KcuXGs0IBGvowQYk2H4=
Subject key identifier:   4A:69:28:74:72:96:BE:FD:B9:6A:CF:8C:B1:51:64:45:B2:30:15:BA
Authority key identifier: CC:36:C4:C8:36:F6:83:C6:9E:AE:B1:FF:64:4F:44:7D:7B:D9:87:2C
Certificate issuer:       /CN=F3673434AF/serialNumber=CC36C4C836F683C69EAEB1FF644F447D7BD9872C
Certificate serial:       37
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/zDbEyDb2g8aerrH_ZE9EfXvZhyw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3673434/E02DC5CA573B11F0946C0BB1DAE4EC9C/zDbEyDb2g8aerrH_ZE9EfXvZhyw.mft
Manifest number:          36
Signing time:             Sat 23 Aug 2025 05:21:37 +0000
Manifest this update:     Sat 23 Aug 2025 05:21:36 +0000
Manifest next update:     Mon 25 Aug 2025 05:21:36 +0000
Files and hashes:         1: zDbEyDb2g8aerrH_ZE9EfXvZhyw.crl (hash: rqUDCHXnYMp0a+1jFm9IVjxpQf7ZUBXK2svy8DlEpFo=)
                          2: 343527EC574311F0A862D5DEDAE4EC9C.roa (hash: x/7F4asAIq7GGBZnvwCpIemwPhh8Px7ZKiwTMxkW1Bs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3673434/E02DC5CA573B11F0946C0BB1DAE4EC9C/zDbEyDb2g8aerrH_ZE9EfXvZhyw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3673434/E02DC5CA573B11F0946C0BB1DAE4EC9C/zDbEyDb2g8aerrH_ZE9EfXvZhyw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/zDbEyDb2g8aerrH_ZE9EfXvZhyw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 25 Aug 2025 00:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 55 (0x37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3673434AF, serialNumber=CC36C4C836F683C69EAEB1FF644F447D7BD9872C
        Validity
            Not Before: Aug 23 05:21:36 2025 GMT
            Not After : Aug 25 05:21:36 2025 GMT
        Subject: CN=68a94fe1-95ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:26:6a:07:55:0b:09:3a:c3:8b:c7:60:54:d7:
                    0e:df:4e:57:ef:ad:d6:bc:b7:a0:3d:3a:0e:e6:ac:
                    d6:cd:61:87:91:a9:c7:5a:02:59:d3:78:26:d5:4f:
                    2a:69:3b:11:03:8e:36:ae:aa:99:29:f0:1e:3d:62:
                    b7:fc:d3:0a:b5:39:23:e2:57:a7:8d:da:50:4c:df:
                    72:da:eb:98:61:65:4c:c1:db:80:ce:fb:42:89:d3:
                    e2:10:a4:2d:ea:69:c5:e5:b7:ce:9a:46:37:1c:90:
                    52:94:4f:2e:74:f6:95:b8:be:08:0c:42:1c:71:ae:
                    5d:52:49:77:53:1a:61:6f:a0:ca:f3:84:f8:df:5f:
                    fc:ca:f9:7c:cc:8d:f6:bf:1a:cc:bd:24:c3:c4:88:
                    e9:0e:19:34:45:47:93:95:92:87:c2:5f:15:38:b3:
                    36:35:cd:48:c6:fe:5e:53:b3:91:f1:bb:70:29:dd:
                    4d:9e:d4:20:68:a8:5b:73:90:df:d3:4e:d4:d2:54:
                    73:96:87:95:be:1e:87:64:56:5c:e9:94:34:4f:a9:
                    68:ff:b4:e9:eb:59:2d:05:49:52:c8:56:07:25:6d:
                    64:89:5f:75:35:20:c9:9d:0e:2d:f8:88:d6:66:e0:
                    72:a3:c9:72:54:c2:8b:de:08:bd:4f:f3:17:ab:3c:
                    e4:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:69:28:74:72:96:BE:FD:B9:6A:CF:8C:B1:51:64:45:B2:30:15:BA
            X509v3 Authority Key Identifier:
                keyid:CC:36:C4:C8:36:F6:83:C6:9E:AE:B1:FF:64:4F:44:7D:7B:D9:87:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3673434/E02DC5CA573B11F0946C0BB1DAE4EC9C/zDbEyDb2g8aerrH_ZE9EfXvZhyw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/zDbEyDb2g8aerrH_ZE9EfXvZhyw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3673434/E02DC5CA573B11F0946C0BB1DAE4EC9C/zDbEyDb2g8aerrH_ZE9EfXvZhyw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:19:6f:11:ae:15:4a:31:dc:82:92:4b:d0:51:da:48:01:28:
         78:20:7d:12:31:57:74:dc:3e:e4:be:a1:5b:2b:55:10:5c:f2:
         bd:6d:c3:9d:05:1d:c9:2c:3c:d2:49:e0:c8:ba:ff:23:22:3e:
         fc:8b:32:ba:ed:fc:c4:16:b9:0a:a1:8e:37:1b:8e:2d:69:50:
         51:a8:47:6e:f5:5c:1e:11:92:2a:24:07:e5:9a:a7:9e:80:de:
         ca:74:a3:34:df:d4:b8:88:0d:a4:0e:ac:45:67:1c:4e:12:7d:
         47:6a:e0:f4:03:68:0c:58:8d:fd:44:da:8a:3a:f4:c6:00:c6:
         ea:90:bd:f6:c1:e7:1f:2c:42:3b:c9:47:79:4d:b8:05:4a:e5:
         73:80:40:f8:b5:b9:83:0d:f3:98:08:e7:cc:56:5e:dc:96:26:
         f4:29:4a:be:a7:a0:27:2d:91:85:38:39:bf:8b:7d:c0:c1:ce:
         36:85:24:23:89:be:fe:b2:8f:5b:45:0c:af:2f:fd:96:41:b6:
         b5:4f:e8:ab:63:50:52:cf:cd:46:94:c4:96:7a:80:b7:99:67:
         53:c3:92:66:8e:6f:82:2f:a5:94:91:4b:73:77:22:07:e7:18:
         9f:0a:f3:57:a3:b6:f5:72:32:ea:66:5b:0b:ae:a5:12:a2:05:
         1a:46:33:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:09:57 2025 by rpki-client